Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: MzuZF6z2N21CEREk5pyYlsgIgXm/HYaBKwr2goWh+6I=
Subject key identifier: 7B:40:25:21:1B:62:3A:6A:B5:F2:D9:EF:39:B4:A1:FC:E9:14:10:9E
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 0196116A23D59FE2B7A56C17EA4F8193310D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 1210
Signing time: Mon 07 Apr 2025 18:01:30 +0000
Manifest this update: Mon 07 Apr 2025 18:01:30 +0000
Manifest next update: Tue 08 Apr 2025 18:01:30 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: 6T58EpaW+q0gafMzpuMgmISmUuQeRdkESQ34VWu076E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:6a:23:d5:9f:e2:b7:a5:6c:17:ea:4f:81:93:31:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Apr 7 18:01:30 2025 GMT
Not After : Apr 8 18:01:30 2025 GMT
Subject: CN=7b4025211b623a6ab5f2d9ef39b4a1fce914109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:fd:5d:0a:ac:dc:b8:cc:0f:f2:46:be:75:
3d:e0:1f:f4:57:08:7f:ad:b5:f9:ec:18:82:d8:60:
7c:21:e4:d4:92:08:4f:06:68:c4:73:64:c5:80:f9:
6e:d8:bc:a8:3b:e0:3b:cb:39:6d:69:03:ab:ff:b2:
c2:54:71:0d:6d:d4:9b:7a:70:cd:ef:2b:92:7a:cf:
d7:51:4b:dc:07:9b:a8:21:a3:fe:cf:8f:64:40:cd:
1e:27:a7:81:e3:4c:16:6e:d3:bf:85:b4:15:24:be:
88:d6:f8:88:1f:40:a8:90:33:21:0e:76:f7:10:01:
6c:af:1b:67:bf:a2:3d:5e:14:fb:83:d4:70:60:42:
81:e5:2c:55:c8:66:f8:65:a1:8b:d7:44:76:63:09:
b2:ee:4a:2f:d6:a1:94:cb:c6:68:10:4e:4f:08:40:
de:89:e3:8d:d6:4b:22:4b:69:04:39:31:a0:42:25:
e8:53:22:a1:44:74:74:62:df:ba:46:86:f2:0b:a0:
00:88:b7:67:15:cf:c1:e8:bb:e9:4d:3a:6e:fc:71:
7d:ac:73:e2:c9:81:26:31:f2:5a:94:78:56:67:17:
78:f1:7a:8a:bb:ae:1a:0a:71:7a:9d:50:f9:36:07:
5b:81:45:f5:8c:af:cc:3e:84:2a:d8:46:b4:19:1a:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:25:21:1B:62:3A:6A:B5:F2:D9:EF:39:B4:A1:FC:E9:14:10:9E
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ad:23:72:9d:67:d1:25:46:bc:0d:04:b3:a6:68:92:f4:81:
a4:1b:32:89:e0:50:2f:43:37:b8:b2:96:0b:c0:01:e5:12:f5:
14:c6:f7:ee:f8:d6:6b:fe:4f:40:49:a9:ba:8c:0d:24:b0:90:
a6:e1:a6:d0:be:e3:ab:8a:65:9b:78:e9:c3:3f:d0:5a:70:8e:
b5:8c:f1:2a:9b:fa:ff:12:23:20:4f:8c:69:b1:70:46:eb:48:
93:61:ed:b2:b6:47:6b:a7:ae:a4:43:c7:46:e5:44:8d:be:79:
bd:d7:84:5a:e9:c1:06:38:bf:46:71:f0:fb:71:54:f0:6f:ca:
e3:71:96:9e:ad:8c:e1:58:4f:46:57:8d:e1:fc:f1:44:4e:54:
43:93:a7:24:3c:82:07:a5:0b:53:cc:85:2f:97:10:6c:07:d6:
56:7f:35:fb:f1:ff:28:e6:9c:f6:15:96:78:3a:23:17:90:71:
9f:04:fb:90:63:1a:b1:56:ec:c2:05:64:20:ed:4f:53:f3:61:
68:24:69:45:be:44:3f:cb:8c:cd:55:17:97:99:e9:ec:3b:aa:
bc:a5:ab:8a:5a:aa:73:bc:ca:6e:26:d3:2d:57:aa:ff:68:c2:
eb:93:84:76:cd:c2:3b:2d:ac:4d:4f:ce:b5:b8:d2:88:b4:f3:
d7:53:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:09 2025 by rpki-client